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(54) Interworking function for ce!Su!ar wireless systems 



(57) A wireless network system comprising a mobil- 
ity enhanced packet data network and at least one bas- 
estatlon subsystem (BSS). The BSS communicates 
with the mobility enhanced packet data network. Using 
an Interworking function (IWF) that performs the adap- 



tation control plane and user plane protocols native to 
the 8SS and the mobility enhanced data network re- 
spectively, The mobility enhanced packet data network 
has at least one bridge (GW1 , GW2) to an external net- 
work (PSTN, Internet). 
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1 EP1 

Description 

[Q001] This disclosure teaches how to provide an in- 
ierworking function for cellular wireless systems. Spe- 
cifically, techniques for attaching a conventional cellular 
basestation system (Cellular BSS) to a mobility en- 
hanced packet data network are provided. 

Glossary 

[0002] To help in understanding the present disclo- 
sure, a glossary of terms is provided hereunder, 

API Application Programming Interface 

ATM Asynchronous Transfer Mode 

BSC Basestation Controller 

BSS Basestation Subsystem 
BSSMAP Basestation Subsystem Mobile Application 
Part 

BTS Basestation Transceiver System 

CCB Call Control Block 

CIC Circuit Identity Code 

DTAP Direct Transfer Application Part 

EIR Equipment identification Register 

GSM Global System for Mobile communication 

GSMP Generic Switch management protocol 

HA Home Address 

IMS! international Mobile Subscriber ID 

IWF interworking Function 

MATM Mobility enhanced ATM 

MM Mobility Management 

MSC Mobile Switching Center 

MSISDN Mobile Subscriber ISDN 

MTP Message Transfer Protocol 2 

MUN! Mobility enhanced User Network Interface 

RR Radio Resource management 

SS7 Signalling System 7 

SSM System Startup Module 

SCCP Service Connection Control Part 

TMSI Temporary Mobile Subscriber ID 

UNi User Network interface 

[0003] Second generation cellular wireless networks 
that follow the GSM, IS-95 and IS-138 standards have 
the same or similar hierarchical architecture comprising 
of a set of functional entities. Further details of GSM can 
be found in M. Mouiy M,-B, Pautet: 'The GSM System 
for Mobile Communications" Cell & Sys 1992, ISBN: 
2-9507190-0. Further details of IS-95 can be found in 
Electronic industries Association/ Telecommunications 
industry Association, Mobile station-base station com- 
patibility standard for dual-mode wideband spread 
spectrum cellular system, TIA/ETATS-95-A. May, 1995. 
Further details of IS-136 can be found in Electronic in- 
dustries Association/Telecommunications Industry As- 
sociation, TDMA Cellular PCS (ANSI/TWEIA-1 36-99) 
TIA/EIA 136. Major components of a cellular wireless 
network are: Mobile Switching Center (MSC), Basesta- 
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tion Controller (BSC) and Basestation Transceiver Sys- 
tem (BTS). In the present disclosure, Basestation Sub- 
system (BSS) is referred to as the combination of BSC 
and BTS. 

5 [0004] Components are arranged in correspondence 
with the centralized control functions being executed by 
the MSC. The MSC forms the highest level of the hier- 
archy. Further, the MSC acts as the signaling endposnt 
for all mobile terminals. Additionally, Voice bearer con- 

10 nections originated and/or terminated in a mobile device 
follow the signaling connection. Such connections are 
passed through the entire hierarchy up to the MSG, Like- 
wise, even the connections between two mobile devices 
that are associated with one 3TS or BSC are passed 

15 through the MSC, in addition, the MSC forms the Gate- 
way to other networks such as the Public Switched Tel- 
ephone Network (PSTN), 

[0005] In the level lower to the MSC, the BSC controls 
a given radio location area. Such a radio location area 
20 comprises multiple radio cells. The BSCs perform coor- 
dination and radio control functionsforthe radio location 
area. 

[0008] The lowest level of the hierarchy is the radio 
cell which is served by a BTS, The BTS is simple and 
2$ contains the radio frequency (RF) transmitter and re- 
ceiver, 

[0007] It is to be noted that the functionality and the 
associated costs are highest at the highest level which 
is the MSC. In a typical scenario, a single MSC or a few 

30 (< 10) MSCs are deployed in a nationwide or regional 
cellular network. The number of devices Increases in the 
lower hierarchy levels, For example, there are multiple 
BSCs attached to an MSC and multiple BTSs are con- 
trolled by a BSC. 

35 [0008] Cellular network architecture evolved from 
pre-existing circuit switched telephone network (PSTN). 
MSCs that act as central components of the network are 
derived from central office exchange switches and are 
created by modified telephone switches. The cellular 

4G network infrastructure is built by using preexisting wire- 
line transport infrastructure for interconnecting the var- 
ious components within the hierarchy, Leased lines us- 
ing PDH (Piesiochronous Digital Hierarchy) and SDH 
(Synchronous Digital Hierarchy) framing and multiplex- 

4$ ing are set up between various devices Within the hier- 
archy to ensure the properties required to perform con- 
nection and mobility control in a timely manner. Howev- 
er, the ieased iine infrastructure is an expensive com- 
ponent in the operation of the cellular network, 

50 [0009] To offer data services via such cellular net- 
works, a second packet data network has to be de- 
ployed in parallel to the circuit switched network. A 
GPRS (General Packet Radio Service) network is a typ- 
ical example of this secondary data network. For further 

55 details on GPRS, See, European Telecommunications 
Standards Institute (ETSI): General Packet Radio Serv- 
ice (GPRS) Service Description; Stage 2 GSM 03.80 
V5.3.0 1998-03. But, the setup, operation and rnainte- 
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nance of two separate networks imposes additional in- 
vestment and operational costs on the network operator 
[0010] Also, with the evolving packet data networks 
(ATM, IP, Frame Relay, X.25) and data services to be 
offered via the cellular system, the advantages that 
would result from the use of packet data network infra- 
structure for the unified transport of data and voice alike 
has not yet been realized, However, this approach ne- 
cessitates the intemvorking of BSC and BTS with the da- 
ta network- Such an interworking would involve physical 
interworking of devices as well as interworking of control 
and user plane protocols. Further, since packet data net- 
works provide instant data transfer without timeiy con- 
nection setup procedures, the bandwidth can be used 
on demand resulting in significant gains due to multi- 
plexing. 

[0011] In addition, the signaling endpoints for mobile 
device connection control is not presently decentralized 
such as would be the case if, for example, the control 
paired with the interworking function. Thus in conven- 
tional systems connection routing is not optimized. For 
example, connections from one mobile device to anoth- 
er mobile station (MS) are always routed to a central 
point (MSC), which leads to unnecessarily wasteful use 
of resources. The same applies to the Gateway function 
to other networks, which are presently not distributed 
across multiple nodes, As a result the total load over the 
entire network and the total provisioned capacity is high 
and need to be lowered. 

[0012] The coverage area of conventional cellular 
networks comprises multiple radio ceils which can be 
overlapping and non-overlapping. Each radio cell is con- 
trolled by a BTS. The BTS contains the radio system 
and is typically co-located with an antenna site, A cellu- 
lar mobile station (MS) establishes a radio link with the 
BTS that covers the geographical area in which the MS 
is currently located. 

[0013] To achieve wide coverage with small transmis- 
sion power and to re-use frequency spectrum many (up 
to thousands in a nationwide network) radio cells, each 
controlled by a separate BTS, form the cellular network. 
Therefore, it ss advantageous to keep the BTS simple 
and cheap, The functionality is reduced to basic radio 
functions like transmitting and receiving. The process- 
ing and control functions are executed in a BSC. The 
BSC manages multiple (up to thousands) BTS. The BSS 
contains a BSC and the STSs, which are connected to 
this BSC. Multiple BSCs interface with the MSC. The 
MSC has multiple functions including connection control 
for the mobile devices, gateway to other networks 
(PSTN, Data Network), overall resource management 
and in conjunction with associated databases the sub- 
scriber management and mobility control The databas- 
es are: Home Location Register and Visitor Location 
Register. One MSC can typically handle hundred of 
thousands of subscribers. Multiple MSCs are deployed 
in large networks. FIG.1 illustrates the architecture of a 
conventional cellular network, 



[0014] Asshown in FIG.1 the MSC (1.1) is connected 
to multiple BSCs (2,1 „.2,n) via links 1-2.1 „.1-2.n. Each 
BSC (2.1. ..2.n) controls a set of BTS (3.1.1, 3.1.2, ... 
3.1 .i, 3.2.1 ...3.2.k, 3.n.1 ...3.n.l) via the links 2.1-3.1 .1 ... 

s 2.n-3.n.l. The BSS1 comprises BSC 2.1 and BTS 
3.1.1 ...BTS 3.1. i, B552 comprises BSC2.2 and BTS 
3.2.1 ...3.2.k, and BSS n comprises BSC 2.n and the 
BTS 3.n.1 ...3.n.l. In addition the MSC (1 .1) has connec- 
tions to another MSC (MSC 1.2) and the public phone 

10 network (PSTN) as well as a Data network via dedicated 
links (1.1-1.2, 1.1-P, 1.1-D). The links interconnecting 
the BTSs with BSCs (links 2.1-3.11.,.2,n-3.n.l) as well 
as the links interconnecting the BSCs with an MSC 
(1-2.1. ..1-2.n) are dedicated links, which are statically 

15 set-up. In practice those dedicated links are made of 
fixed leased lines or microwave links. 
[0015] The advantages In using a packet based data 
network infrastructure and distributed connection con- 
trol for interconnecting the BSS are numerous, esp. in 

2Q terms of efficiency and costs forsetting up and operating 
a wireless cellular network. 

[0018] A mechanism that allows the attachment of a 
conventional Cellular BSS (Basestation Subsystem) to 
a mobility enhanced packet data network is taught in the 

25 present disclosure, An element in the system is an In- 
terworking Function (IWF) that allows interworking of a 
Wireless Cellular BSS with packet data network. It is as- 
sumed that the packet data network supports mobility, 
i.e. registration, i.e. -registration, authentication, and 
handover as described in, see C. Perkins: "Mobile IP 
Design Principles and Practices", Addison Wesley 
1997, ISBN 0-201 -83489-4 and B, Rajagopalan, D. Rei- 
ninger: "Wireless ATM: QoS and Mobility Management" 
in Mobile Communications Handbook second edition, 

35 CRC Press IEEE Press 1999, ISBN 0-8493-8597-0. The 
IWF is typically realized in a computing device having 
interfaces with the packet data network and the BSS. 
The control part of the IWF can be separately realized 
on any computing device that is attached to the packet 

40 data network. The IWF translates user plane protocols 
and control plane protocols used on the cellular side 
(BSS) into protocols specific to the mobility enhanced 
network. An address server that contains subscriber da- 
ta such as identification, subscriber profile and billing 

45 information also contains call routing information to de- 
termine the IWF the subscriber is currently associated 
with. The present technique makes it possible to Imple- 
ment new high-speed, internet-oriented mobile net- 
works while preserving backward compatibility to exist- 

so Ing air interfaces and subscriber equipment. 

[0017] The present disclosure teaches a solution for 
interconnecting traditional BSSs to a packet data net- 
work. The functionality of the MSC is distributed to mul- 
tiple network elements, preferably the interworking 

ss nodes that interconnect conventional BSS to a packet 
data network. Those network elements can be realized 
by using cheap "off the shelf hardware since the re- 
quirements interims of throughput and reliability are low- 
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er compared to MSCs where all traffic is traversing and 
represents a singular point of failure. 
[0018] The packet data network should support mo- 
bility, The present solution is shown for ATM but can be 
easily extendedto other data networktechnologies such 
as IP, 

[0019] Since 3rd generation digital systems, with a 
large proportion of higher-speed data traffic, wiil evolve 
from 2 nd generation system the advantages of using a 
packet data network infrastructure apply to future cellu- 
lar networks as well, especially if heterogeneous air in- 
terfaces are deployed to set up hot spots offering high 
bandwidth in a small geographical coverage area. 
[0020] To meet the objectives of the invention there is 
provided a wireless network system comprising a mo- 
bility enhanced packet data network and at least one 
basestation subsystem (855), said BSS communicating 
with said mobility enhanced packet data network, said 
BSS further comprising a base station controller {BSC}; 
said mobility enhanced packet data network having at 
least one bridge to an external network. 
[0021] Preferably, said mobility enhanced packet data 
network is connected to said at least one BSS through 
the BSC using an Interworking function (IWF), said IWF 
being implemented in a computer, 
[0022] Preferably, the network further comprises a 
Address server (AS) attached to said mobility enhanced 
packet data network. 

[0023] Preferably the network can transport data and 
voice traffic originated or terminated by mobile devices. 
[0024] Still preferably, the bridge is formed using a 
gateway, said gateway performing protocol mapping be- 
tween protocols In the mobility enhanced network and 
external network. 

[0025] Still preferably, the IWF is integrated into said 
BSC. 

[0026] Still preferably, said IWF includes functional 
entities comprising BSS control, call control, mobility 
management, radio resource management, user plane 
adaptation and proxy signalling. 
[0027] Still preferably, said address server is queried 
and said address server contains mobile ID, routing in- 
formation for routing within the mobile packet data net- 
work, subscriber profile and authentication information. 
[0028] Still preferably, call processing is done in a dis- 
tributed fashion by the IWF. 

[0029] Still preferably, said SWF performs proxy sign- 
aling for the packet data network. 
[0030] Still preferably, MSISDN number is used to se- 
lect a proxy signaling instance. 
[0031] Still preferably, said network is based on ATM. 
[0032] Still preferably, air interface is based on a 
GSM. 

[0033] Still preferably, said gateway is co-located 
within the IWF. 

[0034] Still preferably, said gateway is attached to any 
point in the mobility enhanced packet data network, 
[Q035] Still preferably, the Address server comprises 



international mobile subscriber identifier (IMS!). 
[0036] Stiil preferably, the Address server comprises 
mobile station ISDN number. 
[0037] Still preferably, the Address server comprises 
5 packet data network routing information, 

[0038] Still preferably, an identifier that identifies the 
MS is carried in the Call Setup message as subaddress 
IE. 

[0039] Still preferably. ATM adaptation layer 1 is used 

10 in the network for voice traffic bearer. 

[0040] Still preferably ATM adaptation layer 2 is used 
in the network for voice traffic bearer. 
[0041] Another aspect of the present invention is a 
network system with traffic originating in and terminating 

15 in mobile devices, wherein a single network infrastruc- 
ture can handle both data and voice traffic, 
[0042] Preferably different interface technologies are 
used. 

[0043] Another aspect of the present invention is a 
20 method for updating a iocation of a mobile station (MS) 
in a cellular networking system, said cellular networking 
system comprising at least one basestation subsystem 
(855) connected to a mobility enhanced data network 
through an IWF and an address server, said method 
25 comprising: a) Invoking a location update procedure of 
the address server to obtain information stored for the 
MS; b) triggering authentication of the MS using said in- 
formation; c) marking the MS as active if said authenti- 
cation is successful; and d) registering an address of the 
30 IWF as a routing address within the mobility enhanced 
packet data network, 

[0044] Stiil another aspect of the present invention is 
a method for terminating a call in a mobile station (MS) 
in a cellular networking system, said cellular networking 

35 system comprising at least one base station subsystem 
(BSS) connected to a mobility enhanced data network 
through an IWF and an address server, said method 
comprising: a) conveying the routing information of the 
MS as part of a call setup message; b) using the routing 

40 information to identify and select the proxy signalling in- 
stance associated with the MS; c) invoking necessary 
actions including service authorization, paging, call set- 
up and bearer connection establishment, said invoking 
being done by the IWF; d) returning confirmation to a 

45 caller if the call is accepted otherwise sending an error 
message. 

[0045] Yet another aspect of the present invention is 
a method for originating a call in a mobile station (MS) 
in a cellular networking system, said cellular networking 

50 system comprising at least one base station subsystem 
(BSS) connected to a mobility enhanced data network 
through an IWF and an address server, said method 
comprising: a) receiving a connection setup request car- 
rying destination Information at the IWF; b) deciding 

55 whether the call setup request is destined for the mobil- 
ity enhanced data network or destined to an outside us- 
er; c) directing the call to a gateway function if the call 
setup request is destined for an outside party; d) estab- 
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Sishing one or multiple connections for the call. 
[0048] Yet another aspect of the present invention is 
a method for performing a handover of signaling and 
bearer connections of a mobile station (MS) between 
two IWFs in a cellular networking system, said cellular 
networking system comprising at least two base station 
subsystems (BSS) connected to a mobility enhanced 
data network through the two IWFs and an address 
server, said method comprising: a) a BSS requesting a 
handover; b) the IWF associated with the BSS deter- 
mining the target IWF based on radio cell identifies sup- 
piled in the handover request; c) triggering necessary 
procedures on the network side and the BSS side to fa- 
cilitate handover of signaling and bearer connections; 
d) communicating with the target iWF; e) providing con- 
nection and MS data to the target IWF so that the con- 
nection can be re-routed; and f) updating the address 
server with the address of the target IWF 
[0047] The above objectives and advantages of the 
present invention wili become more apparent by de- 
scribing in detail preferred embodiments thereof with 
reference to the attached drawings in which: 

FiG.1 shows an Architecture for a Traditional Cellu- 
lar System, 

FSG.2 shows a Wireless Network embodying the 
present invention, 

FIG.3 depicts an embodiment of the IWF with the 
major functionalities and interfaces, 

FIG.4 shows an example of a location update sce- 
nario. 

FIG.5 shows an example of a mobile terminated call 
scenario, 

FIG, 6 shows an example of a mobile originated call 
scenario, 

FIG J shows an example of a handover procedure. 

FIG. 8 shows afunctional architecture and interfaces 
for a preferred embodiment of the disclosed 
technique, 

FIG,9 shows a reference model for the preferred 
embodiment, 

FIG. 10 shows an embodiment of the protocol stacks 
in the BSA. 



FIG, 13 shows an embodiment of the BS IWF non- 
roaming location update with registration. 

FIG. 14 shows an example of a mobile originated BS 
s IWF call setup. 

FIG. 15 shows an example of a mobile terminated BS 
IWF call setup, 

10 FIQ.18 shows an example of BS IWF handover pro- 
cedure at the old BS IWF. 

FiG.1 7 shows an example of BS IWF handoff proce- 
dure at the new BS IWF. 

15 

FIG. 18 shows an example of a mobile originated BS 
IWF call release, 

FIG= 19 shows an example of a network initiated 3S 
2Q IWF call release. 

FIG, 20 shows an embodiment of the address server 
software architecture. 

25 [Q048] The network architecture of a cellular network 
that interconnects BSS to a packet data network accord- 
ing to the preferred embodiment is shown in FIG.2, Ac- 
cording to the preferred embodiment the BSCs 2.1 ...2.n 
are connected to the packet data network via interwork- 

30 ing Functions IWF 1 ...IWF n, The IWFs are preferably 
co-located with the associated BSCs that provide the 
interconnection with the packet data network. IWFs may 
also be integrated into the associated BSCs. An address 
server (AS) that is preferably attached to the packet data 

35 network stores data such as address, user profile, rout- 
ing information, billing data. The address server may be 
implemented as a distributed system. The address serv- 
er may also be co-located with the IWF or integrated 
with the IWF. The bridges to external networks such as 

40 the PSTN are formed by Gateways GW 1 , GW 2 that 
perform the protocol mapping between the protocols 
used in the packet data network and the external net- 
work, e.g. PSTN, instead of or in addition to the PSTN 
any other data network maybe used. The Gateways can 

45 be attached at any point in the packet data network, The 
Gateways may also be co-located with the IWF or inte- 
grated with the IWF. 

[Q049] In the following sections, the components ac- 
cording to the preferred embodiment are listed and ex- 
50 plained. 

A. IWF {Irsterworking Function) 



FIG. 11 shows an embodiment of the BS IWF soft- 
ware architecture. 

FIG. 12 shows an embodiment of the BS IWF non- 
roaming location update without registration. 



55 



[0050] The IWF contains the functional entities to con- 
trol the BSS, to act as a signaling endpoint for MS and 
to perform the proxy signaling for the packet data net- 
work. The IWF performs call control, mobility manage- 
ment, resource management and user plane adaptation 
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between the protocois used at the cellular side and the 
protocols used In the packet data network. FIG.3 Illus- 
trates the major functional entitles and their interfaces, 
[0051] Major functions of the IWF are described be- 
low: 

1 . Signalling endpoint for the MSs 

[0052] Signaling protocois for connection controi 
(Setup, release) are executed between the MS and the 
IWR in case of GSM, signaling protocols are based on 
the SS7 protocol suite. For details on the SS7 protocol, 
See, European Telecommunications Standards Insti- 
tute (ETSI): Mobile Radio interface Layer 3 Specifica- 
tion GSM 04,08 Phase 2, April 1997. 

2. BSS control 

[0053] The BSS control comprises the protocols and 
the logic to control the BSS. In case of GSM, protocois 
are based on the SS7 protocol suite. For details on the 
SS7 protocol, Sqb, European Telecommunications 
Standards Institute (ETSI): Signaling Transport Mecha- 
nism Specification for the BSS/MSC interface ETSI 
GSM 08.06 Phase 2, July 1995, 

3. Call Control (CC) 

[0054] The call control contains the call state ma- 
chines and associated logic for the active connections 
between the MS and the network, The call control also 
forms the bridging layer between the signaling endpoint 
for the MS and the proxy signaling entity. In case of 
GSM. CC implements the procedures specified in. Eu- 
ropean Telecommunications Standards Institute (ETSI): 
Mobile Radio Interface Layers Specification GSM 04.08 
Phase 2. April 1997. 

4. Mobility Management (MM) 

[0055] The mobility management contains the logic 
for processing the location information of mobiles, i.e. a 
mobile enters or leaves a location area controlled by the 
BSC, It invokes the procedures to the BSS and the pack- 
et data network side, in case of GSM, MM implements 
the procedures specified in European Telecommunica- 
tions Standards institute (ETSI): Mobile Radio Interface 
Layer 3 Specification GSM 04.08 Phase 2. April 1997. 

5. Radio Resource Mana2ement (RRM) 

[0058] RRM performs resource management and 
handoff control, it maintains a data record for each MS 
currently associated with the IWF. In case of GSM, this 
module implements the network side of GSM RIL3 RR 
protocols. For further details about these protocols See 
European Telecommunications Standards institute (ET- 
SI): Mobile Services Switching Center-Basestation Sys- 



tem (MCS-BSS) interface layer 3 specification ETSI SM 
08.08 Phase 2, September 1 996. 

8. User plane adaptation 

5 

[0057] This entity performs the adaptation of the me- 
dia stream (e.g. voice) between the packet data network 
and the BSS side. This can comprise compression/de- 
compression and transcoding, 

10 

7. Proxy signaling 

[0058] The proxy signaling terminates the call related 
and mobility related signaling protocols, which are used 
'5 for communication within the packet data network. One 
logical instance is created for each associated MS. Each 
logical instance emulates a mobile node that Is native 
to the mobility enhanced packet data network. This 
proxy signaling interfaces with the MM and CC modules. 
Each instance is addressed via terminal identifier that is 
carried as a parameter during connection setup. 

B. Address Server (AS) 

[Q059] The Address Server maps addresses used for 
identification and routing used in the BSS into address- 
es and identifications used in the packet data network. 
In addition, the address server can contain the subscrib- 
er records with service profile, authentication informa- 
tion, billing etc, 

[0080] In the case of the GSM cellular standard the 
address server contains the IMS! (international Mobile 
Subscriber Identifier), the MSISDN (Mobile Station IS- 
DN number), the packet data network routing Informa- 
tion, e.g. the IP address of the IWF at the present loca- 
tion of the mobile station as well as the associated home 
address In the packet data network, it may also contain 
a Temporary Mobile Subscriber Identifier (TMSI) as de- 
fined in GSM, 

[0Q81] In addition, the authentication triplet as well as 
the billing and subscriber information can be maintained 
in the address server. 

[0082] The address server is a database, which can 
be distributed across multiple computers, Special mech- 
anisms should ensure integrity of data within the distrib- 
uted database, The address server is attached to the 
packet based data network. 

€. Gateway function 

[0083] The gateway function is used as a bridge to 
another network. It maps user plane and control plane 
protocois used in mobility enhanced packet data net- 
work and the target or next transit network. The gateway 
function can be implemented in a single or multiple com- 
puting devices, which are interconnected to the destina- 
tion network. The gateway function may be also co-lo- 
cated within the IWF and thus reducing the total network 
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load, 

D, Effi (Equipment identification register) 

[0084] The equipment identification register stores 
the Ids of Mobile devices. The information is used to 
blacklist a specific MS or groups of MS, The BR can be 
attached to any part of the packet data network, Upon 
association the EIR is queried if the equipment is black- 
listed. The function of an EIR is similar to that described 
in M. Mouiy M.-B. Pautet: "The GSM System for Mobile 
Communications" Cell & Sys 1992, ISBN: 2-95071 90-0, 
The EIR is not shown in FIG.2. 

E. Procedures 

[0085] Someof the procedures forthe operation of the 
preferred embodiment are described hereunder. 

1 . Location update 

[0068] Upon registration of an MS or the change of 
the location area, the IWF invokes a location update pro- 
cedure of the address server to obtain the information 
that is stored forthe particular MS. The subscriber iden- 
tification (IMS! or/and TMSi) that is passed as an argu- 
ment acts as a key into the address server database, 
The IWF may trigger authentication of the MS using that 
information. If authentication is successful, the mobile 
is marked as active in the mobility enhanced packet data 
network. The IWF address that the MS is associated 
with is registered as a routing address within the mobility 
enhanced network. The mechanism within the mobility 
enhanced packet data network to set the routing ad- 
dress is similar to the ones found in C, Perkins: "Mobile 
SP Design Principles and Practices", Addison Wesley 
1997, ISBN 0-201-63469-4 and B. Rajagopalan, D. Rei- 
ninger: "Wireless ATM: QoS and Mobility Management' 
in Mobile Communications Handbook second edition, 
CRC Press IEEE Press 1999, ISBN 0-8493-8597-0. 
FIG,4 illustrates an embodiment of the location update 
scenario. 

2. Connection Setup 

[0087] At least two scenarios can be distinguished in 
the connection setup. The cali couid be originating In the 
mobile (mobile originating) or the call couid be terminat- 
ing in the mobile (mobile terminating), 

(1) Mobile terminating call: 

Forthe purposes of the described embodiment 
it is assumed that the call is properly routed within 
the packet data network to the IWF the MS is cur- 
rently associated with, i.e, the identification of the 
mobile terminal is translated into proper routing in- 
formation. Some of the ways of performing such a 
translation can be based on mechanisms described 



in, seeC, Perkins: "Mobile IP Design Principles and 
Practices", Addison Wesley 1 997, ISBN 
0-201-83489-4 and B, Rajagopalan. D. Reininger: 
"Wireless ATM: QoS and Mobility Management" in 

5 Mobile Communications Handbook second edition, 
CRC Press IEEE Press 1 999, ISBN 0-8493-8597-0. 
The routing information used in the cellular system 
such as the MSISDN number of the MS in GSM is 
conveyed as part of the cali setup message. This 

10 MSISDN number is used to identify and select the 
proxy signaling instance that is associated with the 
MS. if ATM with signaling is used for the packet data 
network, the cellular routing information (e.g, MSIS- 
DN number) may be conveyed in the SETUP mes- 

15 sage sub-address information element (IE). The 
IWF invokes the necessary actions, like service au- 
thorization, paging, setting up signaling and bearer 
connection etc, if the cali is accepted, the confirma- 
tion (connect) is returned via the packet data net- 

20 work to the calling party. In case the call is rejected, 
or for any other reason the cali can not be complet- 
ed, an error message is sent to the caller. Upon cali 
release, the bearer connection is cleared and the 
previously reserved resources are freed, The sub- 

25 scriber information contained in the address server 
may be updated, e.g, for billing purposes following 
connection setup and/or release. FIG,5 illustrates 
the sequence of events for an embodiment of a mo- 
bile terminated connection setup. 

30 

(2) Mobile originating call: 

Forthe purposes of the described embodiment, 
it is assumed that the signaling connection to the 
MS Is established. A connection setup request car- 

35 rying the destination (called party) information is re- 
ceived by the IWF. Using this destination informa- 
tion, the IWF by itself (or in collaboration with the 
address server) determines if the call is destined 
within the mobile network domain or to an outside 

4 o user, If the call is intended for an outside user, it Is 
directed to a corresponding gateway. Upon accept- 
ance of the call, the bearer connection is estab- 
lished. Upon call release, the bearer connection is 
cleared and the previously reserved resources are 

45 treed. The subscriber information contained in the 
address server may be updated, e.g, for billing pur- 
poses following connection setup and/or release. If 
ATM with UNI signaling is used forthe packet data 
network, the cellular routing information (e.g. MSIS- 

50 DN number) may be conveyed in the SETUP mes- 
sage sub-address information element (IE), RG.6 
illustrates the sequence of events for an embodi- 
ment of a mobile originated call 

55 (3) Call from Mobile to Mobile: 

This is a combination of (1) and (2). If the call 
Is originated and terminated from terminals associ- 
ated with the IWF at the same time, the call is han- 
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died locally by the IWR 
3. Handover 

[0088] For the purposes of the described embodi- 
ment, it assumed that the handover takes place be- 
tween different BSCs, i.e. it requires some network in- 
tervention. 

[0083] Moreover, handover is requested by the BSS. 
The handover request contains a possible list of radio 
ceil identifications to which the handover could be tar- 
geted to, The iWF determines the target IWF based on 
the radio cell identifiers supplied in the handover request 
and other criteria such as traffic load. The IWF, that the 
MS is still associated with, triggers the necessary pro- 
cedures on the network side and on the BSS side to fa- 
cilitate handover This SWF communicates directly with 
the target SWF for the handover procedure. All neces- 
sary connection and MS data are provided to the target 
IWF so that the connection can be re-routed, Finally, the 
address server (AS) is updated with the address of the 
target IWF. Using the procedures provided by the mobile 
enhanced packet data network, the rerouting of the con- 
nection within the network is performed. Relevant 
handover information is directly passed between two 
(neighboring) IWFs via the packet data network. As a 
result network handover is fast and efficient in terms of 
overall resources, FIGJ illustrates the event sequence 
during handover 

E Preferred embodiment with a GSM based BBS and 
mobile ATM network infrastructure 

1 . Network Description 

[0070J A typical MATM-GSM network comprises mul- 
tiple mobile ATM-GSM Base. Stations, which are inter- 
connected via the mobile ATM network. The Mobile 
ATM-Network infrastructure is part of the public network 
infrastructure and is shared between multiple operators 
offering mobile and fixed services. Connections are dy- 
namically established thus allowing an efficient use of 
resources while guaranteeing Quality of Service (QoS) 
to existing connections. Alternatively, the mobile ATM 
network can be overiayed to a conventional ATM net- 
work, thus creating a virtual private network (VPN). Mul- 
tiple Gateways can exist for interconnecting the Mobile 
ATM-Network with other networks like the PSTN or the 
Internet. An Address Server stores subscriber informa- 
tion as well as the mappings of identifier and addresses. 
Typically, a service provider would operate the Address 
Server, thus enabling multiple service providers offering 
services using the infrastructure of a single network op- 
erator. The functional architecture and the relevant in- 
terfaces of a mobile ATM network interconnecting two 
GSM-Basestation Subsystems (BSS) and a gateway to 
the PSTN network are shown in FIG. 8. 
[0071] The Basestations, the Gateway, and the Ad- 



dress Server are attached to the Mobile ATM Network 
via the standardized M-UNi, M-NNi, and UNI, respec- 
tively The (M-) ATM-signaling is terminated in these 
standardized functional entities. 

5 [0072] internal interfaces are specified between the 
signaling stacks and the respective interworking func- 
tions (BS IWF, Gateway IWF) and the Address Server. 
The standardized GSM A-interface acts as a logical in- 
terface between GSM Basestation Subsystem (GSM 

io 855) and Base Station Adapter (BSA). The Basestation 
adapter is the physical entity that hosts the interworking 
function, the protocol stacks and the necessary hard- 
ware and driver, While call setup and routing procedures 
rely solely on ATM-signaling, the communication be- 

is tween ATM-GSM-BSAs as well as between the ATM- 
GSM-BSAs/ATM-GSM-Gateway and the Address Serv- 
er are based on TCP/IP connections over ATM (Classi- 
cal IP, LAN Emulation), 

[0073] The description of the ATM-GSM BSA, and the 
20 Address Server is provided in the following sections. For 
simplicity of the description it is assumed that the pre- 
ferred embodiment comprises a single Address Server 
and two ATM-GSM Basestations Subsystems, which 
are connected via two ATM-GSM BSAs to a mobile ATM 
25 network, Further, a singie Address Server provides the 
address translation and identifier mapping. 

2. ATM-GSM BSA Description 

30 [0074] The ATM-GSM BSA converts the user plane 
protocols and control plane protocols (that are standard- 
ized for GSM) into mobile ATM, and vice versa, in the 
user-plane, GSM defines a TDMA scheme that multi- 
plexes 64 kbps voice channels into a 2 Mbit/s E1 -frame. 
35 For the conversion into ATM, multiple voice samples be- 
longing to the same connection are buffered and con- 
veyed within one ATM-cell. The VCI identifies a connec- 
tion, In the opposite direction, i.e. the conversion from 
ATM to TDMA (E1 ), the contents of an ATM ceil is trans- 
40 mitted In a given slot of multiple subsequent El -frames. 
Due to the timing requirements of E1 , the ATM Adapta- 
tion Layer 1 (AAL1) is used to transport voice connec- 
tions. 

[0075] Forthe control plane, SS7-signaling is convert- 
45 ed into Mobile ATM-signaling, and vice versa, in addi- 
tion, the BSA executes some MSC functions to control 
the BSS. The ATM-GSM BSA terminates the standard- 
ized SS7 GSM signaling (MTP-2, MTP-3, SCCP) that is 
used to control the operation of the BSS as well as the 
50 connection control for associated GSM mobile termi- 
nals. On the ATM-side, the ATM GSM BSA contains a 
proxy signaling entity that forms the signaling endpoint 
forthe MATM-UNI-signaling. A single signaling instance 
is created upon power on of the BSA. The BSA has a 
55 single ATM-address that is registered with the network. 
This ATM-address acts as the routing address to the 
mobiles that are currently registered with this BSA. A 
new terminal instance (proxy signaling instance) is Cre- 
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ated for each associated GSM-terminaL The ATM-Sub- 
address information ejementthat is part of the ATM Con- 
nection Setup message references a particular terminal 
instance, The Subaddress information element is ear- 
ned transparently end-to-end through the ATM (UNI, 
NNi) signaling path, 

[0078] The BSA communicates with the neighboring 
BSAs overTCP/IP connections. These TCP/IP connec- 
tions are used for handoffs between Basestations. The 
BSA maintains a TCP/IP connection to the Address 
Server The Address Server is queried for location up- 
date and connection control. 

[0077] The BS IWF triggers the handoff procedure be- 
tween Basestations and in the MATM network. Forward 
handoff mechanism is supported within the MATM net- 
work, i,e, following radio handover a new network con- 
nection is established. 

[0078] Each ATM -GSM subscriber {terminal) is as- 
signed a Location Server within the MATM network. The 
Location Server maintains the ATM location information 
data of the registered terminal. The information is used 
for call routing within the MATM network. The Location 
Server is updated upon Location Update. The terminals 
own ATM address (Home ATM address) has the same 
network prefix as the Location Server, The GSM specific 
data for GSM subscribers roaming in ATM network is 
fetched from the subscriber's home PLMN through the 
Gateway. 

[0079] The BS IWF maintain the mobile related data 
such as the LAI, the IMS! and the MSISDN of each mo- 
bile that is currently registered in the BSA. This is used 
to page mobiles for call setup procedure as defined In 
GSM. For more details on the setup procedure, see Eu- 
ropean Telecommunications Standards Institute (ETSi): 
Mobile Radio Interface Layer3 Specification GSM 04.08 
Phase 2. April 1997. 

3. Address Server Description 

[0080] The Address Server maintains a database for 
the IMS!, MSISDN, Home ATM Address, and Location 
Server Address of ali GSM subscribers. A temporary en- 
try in the database is created for roaming GSM subscrib- 
ers. The Address Server communicates via TCP/I P con- 
nections with its clients. Clients are the ATM-GSM BSAs 
and the Gateways. The lower layer of the TCP/IP trans- 
port is not specified hence ATM (CLIP, LANE) or any 
other layer 2 protocol can be utilized (Ethernet, X25). 
[0081 j A preferred embodiment of the reference mod- 
el is depicted FIG.9. 

4. GSM Basestation Subsystem 

[0082] The GSM BSS is standard compliant GSM 
equipment comprising Base Station Controller (BSC) 
and Base Station Transceiver (BTS). The GSM-equip- 
ment provides the standardized A-interfaceto the BSA, 
The A-interface is defined in European Telecommunica- 



tions Standards Institute (ETSI) GSM Q8.xx series (BS 
to MSC) specifications, The GSM BSS contains the 
TRAU (trunk rate adaptation) functions for providing 64 
Kbps voice channels on the A-interface. 

5 

5. E1-ATM Conversion Unit 

[0083] The El -ATM Conversion unit terminates the 
E1 trunk and converts El-slots (voice channels) into 

10 AAL1-ATM ceils and vice versa. In addition, the conver- 
sion unit does the translation of VCIs (switching) for 
switched MATM connections (SVCs), multiplexing of 
signaling channels and voice channels into one physical 
line (fiber). In addition, the SS7 stack (MTP2, MTP3 ( SC- 

is CP) for communication with the BSS and Mobile GSM 
Terminals is executed. The SS7 signaling Is filtered out 
from the E1 trunk (e.g. Slot 15) and passed on to the 
MTP-2 protocol layer. 



[0084] The software modules for controlling the Bas- 
estation Subsystems, Call Control, Resource Manage- 
ment, and ATM-signaling are executed in the interwork- 
25 ing function (BS IWF). In addition, the BS IWF controls 
the ATM switching fabric. The IWF can be implemented 
in an off-the-shelf PC equipped with an ATM NIC, 
Through the NIC, the BS IWF interfaces with the ATM 
switching fabric for signaling and control, The intercon- 
50 nections to neighboring BSA as well as the connection 
to the Address Server are realized via TCP/iP, which Is 
independent of the lower layer implementation. Typical- 
ly, one would run TCP/IP via the existing ATM network 
using LAN emulation (LAN E) or Classical IP (CLIP). 

35 

7. Address Server 

[0085] The Address Server contains the Database for 
GSM/ATM address translations, it is reachable by the 
*Q BS-IWFs through a well-known IP Address and TCP 
Port Number. 

G. ATM-GSM Basestation Adapter Design 



[QG8S] The BSA comprises three major components. 
The three components are: 

* Hardware and drivers, 

* Protocol stack, 

* BS IWF software, 

2. Protocol Stack 

[0087] The SS7 stack (MTP-2, MTP-3 } SCCP) re- 
quired for BSS signaling is accessible through an API 
function set. The SS7 distribution function extends the 
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SCCP API that is provided by the SS7 stack to the BS 
IWR FIG.1 0 illustrates the protocol stacks. 
[0088] The M-UNI stack that emulates the Mobile 
ATM terminals is available to the IWF software through 
a newly d&f\ne6 API, which performs call control and lo- 
cation management functions. 

3. IWF Software 

[0083] As shown in FIG 11, the IWF Software compo- 
nent is further broken up into the following modules: 

• System Startup Module 

• SS7 protocol stack comprises MTP-2, MTP-3, and 
SCCP, 

• BSS Control 

• Database Server 

• Radio Resource Management 

• Mobility Management 

• Call Control 

• Address Ciient 

• IWF-IWF Interface 

• GSMP Client 

• MATM—Proxy 

[0090] Each of these modules constitutes afunctional 
entity and implements a specific functionality. The mod- 
ules together constitute a single task, except the data- 
base server, which is implemented as a separate task. 
These modules communicate with each through well- 
defined interfaces, A detailed description of these mod- 
ules is provided in the next section, 

H. Detailed Description of IWF Software Modules 

[0091] The following sections give detailed descrip- 
tion or all the modules of the BS IWF Software Architec- 
ture shown in Fig 11. 

I . System Startup Module (SSM) 
[0092] 

1 . This entity takes care of starting the system and 
configuring the IWF. It starts the other modules like 
CC, MM, RR, and BSS Controi modules. 

2. It provides the following interfaces: 

* System startup module provides external inter- 
faces for programming the various parameters 
in the IWF. 

2. SS7 Protocol stack 

[0093] SS7 Protocol stack provides the following 
functionality: 

1 . Establishing, maintaining and tearing down SC- 



CP connections with the BSS on request from the 
Radio Resource module. 

2. it passes all the mobile related messages re- 
ceived from the BSS to the Radio Resource module 
5 along with the connection identifier identifying the 
connection on which they were received, 

3. BSS Control 

10 [0094] BSS control module provides the following 
functionality: 

1. BSS Control is responsible for carrying out the 
layer 3 procedures used on the BSS to MSG inter- 

f5 face for control of GSM services. 

2. On startup, it restarts the BSS by initiating the 
reset procedure, 

3. it initializes ail the circuits identified by their Cir- 
cuit identity Codes (CICs), to the idle state afterstart 

20 up. 

4. When it receives a RESET from the BSS, it clears 
all the calls associated with this BSS and marks all 
the circuits to that BSS as idle. 

5. The BSS control handles Circuits Blocking/Un- 
25 blocking procedures initiated by the BSS, 

8. it communicates with the BSS using SCCP con- 
nectionless service through the SS7 stack. 
7. BSS Control provides the following interfaces: 

30 * It interfaces with the Database Server for up- 
dating circuit related information in the Data- 
base. 

* It interfaces with the SS7 stack to transfer the 
BSSMAP messages that are related to BSS in- 

35 terface management. 

* It interfaces with the Radio Resource Manage- 
ment Layer for informing the status of the BSS- 
MSC interface. 

40 8. The messages sent and received by the BSS 
Control relate to the whole interface and not a par- 
ticular mobile, 

4, Database Server 

45 

[009S] The database server provides the following 
functionality: 

1 . The Database Server provides access to a data- 
50 base in the IWR 

2. It maintains the system configuration data used 
by SSM during system startup. 

3. The Database server maintains the cell-id to IWF 
address mappings, which is used for handoffs, 

55 4. The E1 and ATM interlace parameters are also 
maintained In the database. 
5. The Database maintains temporary location in- 
formation of the mobiles, Information pertaining to 
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ongoing calls is also stored in the database. 

6. The Database Server implements resource 
search and allocation functions. 

7. It provides interfaces for 

* table creation 

* reading/writing data In the table 

* update of entries in the table and 

* table deletion. 

5. Radio Resource Management 

[0GS6] The Radio Resource Management module 
provides the following functionality: 

1 . This module implements the mobility related fea- 
tures like Identification, Authentication and Loca- 
tion update, i.e. the network side of the GSM RIL3 
RR protocol. The GSM RIL3 protocol is specified in 
European Telecommunication Standards Institute 
(ETSI): Mobile Radio Interface Layer 3 Specifica- 
tion GSM 04.08 Phase 2. April 1997. 

2. Radio Resource Management provides the fol- 
lowing interfaces: 

* It provides an interface to the Mobility Manage- 
ment module for RR connection establishment, 
teardown and maintenance. 

* It accepts DTAP messages from the MM mod- 
ule and relays them to the ESS through its in- 
terface with the SS7 stack. 

* RR interfaces with the SS7 stack for initiating 
SCCP connection establishment and tear 
down. The A-interface messages are relayed 
through this interface to the BSS. 

* It uses the IWF-IWF interface for performing 
handover procedures. 

* RR interfaces with the Database Server for up- 
dating connection information in the database. 
This information is required for performing 
handovers, 

3. RR routes BSSMAP management messages re- 
ceived from the SS7 stack to the BSS Control mod- 
ule. It also accepts triggers indicating abnormal 
conditions at the A-lnterface, from the BSS Control 
and informs the MM and CC modules to take suit- 
able actions. 

4. For a subscriber registering at the IWF, RR ob- 
tains a Mobile Tag from the Database Server. This 
tag is used to index the subscriber information 
stored in the IWF. The Mobile Tag is used in inter- 
module communication for associating a message 
or request with a particular mobile. 

5. RR creates a Mobile Data Block for a mobile reg- 
istering at the BS IWF, This is subsequently updated 
with the location information by MM, 

6. On the originating IWF 5 RR initiates the handoff 



procedure after receiving Handoff required mes- 
sage from the BSC. It then coordinates with RR at 
the neighboring IWF to handoff the call, 

7, On the terminating IWF, RR queries the BSS for 
5 resources for accommodating a handoff call from 

another IWF. If the resources are present, RR then 
performs the MATM handoff procedure towards the 
MATM Proxy. 

10 6 ' kfo D ^ty Management 

[0097] Mobility Management module provides the fol- 
lowing functionality: 

15 1 , This module implements the network side GSM 
RIL3 MM protocol 

2. in the IWF, the MM interfaces with 

* Call Control for call related messages and re- 
20 source reservation for a call. 

* RR for receiving and transmitting MM and CC 
messages, and for initiating RR connection es- 
tablishment and termination procedures. 

* Address Client for obtaining address transla- 
25 tions from the Address Server. 

* Database server for IWF resources and mobile 
related data. 

* MATM Proxy for invoking MUNI API's, 

30 3, MM is responsible for initiating location update 
procedures towards the MATM network, on behalf 
of the mobiles registered at the BS IWF initial mo- 
bile registration with the network is also the respon- 
sibility of the MM layer. 
35 4. MM updates the location information of a mobile 
in the Mobile Data Block at the Database. This in- 
formation is available at a location update or an IM- 
Sl Detach. 

5. Outdated location Information is invalidated perl- 
40 odicaiiy in the database. 

8. Call Control messages, which are received from 
the Radio Resource Management module, are for- 
warded to the CC layer by MM, It also conveys 
DTAP messages received from CC back to RR 

45 transparently. 

7. Call Control 

[0098] The Call Control module provides the following 
so functionality: 

1 . Call Control implements the GSM CM layer and 
performs call inierworking between GSM and 
MATM. 

$5 2. It maintains the Call State and GSM RILS CC 
Timers. 

3. it allocates and maintains Transaction Identifiers 
(TIDs) used in GSM RIL3 CC messages. 
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4, CC provides the following interfaces; 

• CC interfaces with MM for call related DTAP 
messages towards the mobile, For all messag- 
ing with MM, CC uses a Mobile Tag that asso- 
ciates the message with a particular mobile, 

• CC interfaces with the Database Server for cre- 
ation of a Call Control Block (CCB), The CCB 
Is used to store call related information during 
a call, This information is used by RR module 
for handoff, 

• Forcail control messages towards the network, 
CC invokes the appropriate MUNI API's. 

• For mobile originated calls, CC gets the called 
MSISDN translated from the Address Server 
through the Address Client. 

• CC controls the ATM Switch through GSMP 
and is responsible for creating/releasing the 
voice bearer connection during call establish- 
ment/release. 

5. It also coordinates with the RR for handoff pro- 
cedure. 

8. Address Client 

[0099] The Address Client implements the following 
functionality: 

1 . Address Client implements the address mapping 
service in the BS IWF by obtaining translations be- 
tween the IMSI, MSISDN and HA from the Address 
Server. It also provides the ATM address of the serv- 
ing Location server within the MATM network. 

2. During SWF start up } it establishes a TCP connec- 
tion with the Address Server that is maintained for 
sending requests and receiving responses. 

3. It accepts requests from IWF components and 
forwards them to the Address Server. The Address 
Server responses containing the requested infor- 
mation are then sent back to the requesting module. 

4. It interfaces with the following components: 

• Call Control for providing translations of MSIS- 
DN number to HA, 

• Mobility Management for providing translations 
of IMS! to HA 

• Address Server for the required translations, 

9. IWF-IWF Interface 

[0100] The IWF-IWF interface provides the following 
functionality. 

1 . This module is responsible for initiating TCP con- 
nection establishment with neighboring BS IWFs 
and maintaining them. These connections are used 
for handover of calls to other IWFs. The server and 



the client side are determined by the lexicographic 
ordering of the IP addresses. The IWF with IP ad- 
dress higher in lexicographic order becomes the 
server and the IWF with the I P address lower in lex- 

s icographic order becomes the client. For example, 
if IWF1 with IP address 139.85,243.15 and IWF2 
with IP address 139.85.243.17 try to connect to 
each other, then IWF1 becomes the client and IWF2 
becomes the server 

*0 2. it Interfaces with the following components: 

• Radio Resource Management Layer for the 
handoff related transactions, 

15 10- GSMP Client 

[0101] This module realizes simple the switching 
functions like adding / deleting a connection. 

20 11. MATM Proxy Server 

[Q102] The MATM proxy signaling for the MATM net- 
work supports per-connection Handoffs, Location Up- 
dates and Multiple Home Address Registrations. 

25 

12. Location Update: Non-Roaming Scenario without 
registration 

[0103] FIG. 12 illustrates the Location Update proce- 
ss dure at the IWF when a MS has been registered with 
the BS IWF a priori. Reference numerals adjacent to ar- 
rows denote the following steps 1-1 8, respectively. 

1 SS7 stack receives SCCP N-CQNNECT (COM- 
35 PLETE LAYERS MESSAGE) indication from the 

BSS. 

2 Received CO Message (COMPLETE LAYERS 
MESSAGE (LOCATION UPDATE REQUEST}) with 
SCCP Connection ID is sent to RR. 

40 3 LOCATION UPDATE REQUEST is sent to MM. 

4 MM sends TRANSLATE IMS! REQUEST to Ad- 
dress Client. 

SAddress Client sends request for IMSI translation 
to Address Server via TCP/IP. 
45 8 Address Client receives response for IMSI trans- 
lation from Address Server via TCP/IP 

7 Address Client sends TRANSLATE IMSI RE- 
PONSEto MM. 

8 MM Sends ATM LOCATION UPDATE REQUEST 
so to M-UNI. 

9 M-UNI responds with ATM LOCATION UPDATE 
RESPONSE to MM. 

10 MM sends LOCATION UPDATE RESPONSE 
message, 

& 11 RR sends CO message to SS7 stack 

12 SS7 stack sends N-DATA to BSS. 

13 MM sends RR RELEASE REQUEST to RR. 

14 RR sends CO message (CLEAR COMMAND) 
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with SCCP Connection ID. 

15 SS7 stack sends N-DATA (CLEAR COMMAND) 
request to BSS. 

16 BS3 sends N-DATA (CLEAR COMPLETE) indi- 
cation to 3S7 stack. 

17 Receive CO Message (CLEAR COMPLETE) 
with SCCP Connection ID. 

1 8 Release SCCP Connection with SCCP Connec- 
tion ID. 

13. Location Update: Non-Roaming Scenario with 
Registration 

[0104] FIG, 13 shows the Location Update procedure 
at the BS iWF when a mobile is entering in the Location 
area served bytheBS-IWFforthefirsttime. Registration 
is required. Reference numerals adjacent to arrows de- 
note the following steps 1-26, respectively. 

1 SS7 stack receives SCCP N -CONNECT (COM- 
PLETE LAYERS MESSAGE) indication from BSS. 

2 Received CO Message (COMPLETE LAYERS 
MESSAGE (LOCATION UPDATE REQUEST)) with 
SCCP Connection ID is sent to RR, 

3 LOCATION UPDATE REQUEST is sent to MM. 

4 MM sends TRANSLATE IMS! REQUSET to Ad- 
dress Client. 

5 Address Client sends request for IMSI translation 
to Address Server via TCP/IP 

6 Address Client receives response for IMSI trans- 
lation from Address Server via TCP/IP. 

7 Address Client sends TRANSLATE IMS! FAIL- 
URE with cause NEW MOBILE to MM. 

8 MM sends NEW MOBILE REQUEST with IMSI 
and NP to Address Client. 

9 Address Clientsends requestfor IMS! translation 
to Address Server via TCP/IP. 

1 0 Address Client receives response for NEW MO- 
BILE REQUEST from Address Server via TCP/IP. 

11 Address Client sends NEW MOBILE RE- 
SPONSE with new HA to MM. 

12 MM sends GET LOCMSERVER ADDRESS RE- 
QUEST to M-U Ni. 

13 M-UNI responds with GET LOCMSERVER AD- 
DRESS RESPONSE with LocMServer Address 
and HA to MM. 

1 4 MM sends UPDATE LOCMSERVER ADDRESS 
to Address Client. 

15 Address Client forwards the request to Address 
Server over TCP/IP. 

16 MM Sends ATM LOCATION UPDATE RE- 
QUEST to M-UNI. 

17 M-UNI responds with ATM LOCATION UPDATE 
RESPONSE to MM. 

18 MM sends LOCATION UPDATE RESPONSE 
message to RR. 

1 9 RR sends CO message to SS7 stack. 

20 SS7 stack sends N-DATA to BSS, 



21 MM sends RR RELEASE REQUEST to RR. 

22 RR sends CO message (CLEAR COMMAND) 
with SCCP Connection ID. 

23 SS7 stack sends N-DATA (CLEAR COMMAND) 
s request to BSS. 

24 BSS sends N-DATA (CLEAR COMPLETE) indi- 
cation to SS7 stack. 

25 Receive CO Message (CLEAR COMPLETE) 
with SCCP Connection ID, 

10 28 Release SCCP Connection with SCCP Connec- 
tion ID. 

14. Call Setup: Mobile Originated 

is [0105] FIG, 14 shows the call establishment proce- 
dure for a mobile originated call. Reference numerals 
adjacent to arrows denote the following steps 1-31 , re- 
spectively. 

20 i SS7 stack receives SCCP N-CONNECT (COM- 
PLETE LAYERS MESSAGE) indication. 
2 Receive CO Message (COMPLETE LAYERS 
MESSAGE (CM SERVICE REQUEST)) with SCCP 
Connection ID is sent to RR from SS7 stack. 
25 3 RR Checks the local database and retrieves MO- 
BILE TAG. 

4 RR sends RR EST IND to MM with the CM SERV- 
ICE REQ as the message. 

5 MM verifies the validity of the mobile and its loca- 
ls tion info. 

8 MM sends RR DATA REQ with CM SERVICE AC- 
CEPT 

7 RR send CO Message (CM SERVICE ACCEPT) 
with SCCP Connection ID to SS7 stack, 
35 B SS7 stack sends SCCP N-DATA (CM SERVICE 
ACCEPT) Request to BSS. 

9 BSS sends SCCP N-DATA (SETUP message) In- 
dication to SS7 stack. 

1 0 Receive CO Message (SETUP) received by RR 
40 with SCCP Connection ID from SS7 stack. 

11 RR forwards the message to MM. 

12 RIL3 CO Message (SETUP) forwarded to CCvia 
MM with MOBILE TAG, 

13 CC creates call control block (CCB). 
45 14 CC Sends CALL PROCEEDING to the mobile to 

MM 

15 MM Sends RR DATA REQ to RR. 

16 RR Forwards the DATA to SCCP with SCCP 
Connection ID, 

so 17 CC sends TRJ/ISISDN to Address Client. 
IB Address Client sends TR_MSISDN_RESP. 

19 Assign Channel with Mobile Tag and send 
MMCC SYNC REQ with the Assignment. 

20 Send CO Message ASSIGNMENT REQUEST 
55 with SCCP Connection ID. RR starts BSSMAP Tim- 
er T1Q. 

21. SS7 stack sends SCCP N-DATA (ASSIGN- 
MENT REQUEST) Request to BSS. 
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22 BSS sends SCCP N-DATA (ASSIGNMENT 
COMPLETE) Indication to SS7 stack. 

23 RR receives CO Message ASSIGNMENT COM- 
PLETE with SCCP Connection ID, Timer T10 is 
stopped. 

24 MM sends Assign Confirm to CC. 

25 CC sends OPEN SVC CONNECTION REQ to 
the MATM side. 

28 MATM sends OPEN SVC CONNECTION CNF 
to CC. 

27 CC programs the GSMP connection via the 
GSMP client. 

28 CC sends MMCC DATA REQ with CONNECT 
message to mobile. 

29 MM forwards the data request to RR. 

30 RR sends SGCPJDATA with SCCP Connection 
ID. 

31 Mobile responds with CONNECT ACK. 

15. Call Setup; Mobile Terminated 

[0106] FIG, 15 shows the call setup procedure for a 
mobile terminated call. Reference numerals adjacent to 
arrows denote the following steps 1-32, respectively. 

1 Indication to establish SVC is received at CC with 
called MSISDN number in ATM subaddress field, 

2 CC assigns a GSM TID to the transaction stores 
value in database and reserves E1 and ATM re- 
sources. 

3 Connection Setup request sent to MM. 

4 RR EST REQ sent to RR by MM. 

5 RR sends CL Message (PAGING) to SS7 stack. 

6 SS7 stack sends SCCP N-UNITDATA (PAGING) 
Request. 

7 SS7 stack receives SCCP N-CONNECT (COM- 
PLETE LAYERS MESSAGE) Indication. 

8 RR receives CO Message (COMPLETE LAYERS 
MESSAGE (PAGING RESPONSE)) message with 
SCCP Connection ID. 

9 CC sends SETUP Message with MOBILE TAG. 
CC start RIL3 CC Timer T303. 

10 RR Send CO Message (SETUP) with SCCP 
Connection ID. 

11 SS7 stack sends SCCP N-DATA (SETUP) Re- 
quest to BSS, 

1 2 SS7 stack receives SCCP N-DATA (CALL CON- 
FIRM) Indication from BSS, 

13 RR receives CO Message (CALL CONFIRM) 
with SCCP Connection ID. 

14,14a RR, MM forwards CALL CONFIRM with 
MOBILE TAG to CC. Timer T303 is stopped, 
15,15a CC assigns Channel with MOBILE TAG. 
18 RR sends CO Message (ASSIGNMENT RE- 
QUEST) with SCCP Connection ID. RR starts BSS- 
MAP Timer T10 

1 7 SS7 stack sends SCCP N-DATA (ASSIGNMENT 
REQUEST) Request to BSS, 
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18 BSS sends SCCP N-DATA (ASSIGNMENT 
COMPLETE) Indication to SS7 stack, 

19 RR receives CO Message (ASSIGNMENT 
COMPLETE) with SCCP Connection ID. 

5 20 t 20a RR sends Assign Confirm with Mobile Tag 
to CC via MM. 

21 SS7 stack receives SCCP N-DATA (ALERTING) 
Indication from BSS, 

22 RR receives CO Message (ALERTING) with SC- 
io CP Connection ID from SS7 stack. 

23, 23a RR, MM forwards Alerting message with 
MOBILE TAG to CC. 

24 SS7 stack receives SCCP N-DATA (CONNECT) 
Indication. 

15 25 RR receives CO Message (CONNECT) with SC- 
CP Connection ID, 

28, 26a RR, MM forwards CONNECT with MOBILE 
TAG to CC. 

27 CC creates caii control block. 
20 28 CC Programs the Connection via the GSMP Cli- 
ent. 

29 CC sends CONNECT ACK with MOBILE TAG in 
MMGCJDATAREO to MM. 

30 RR, MM forwards CONNECT ACK with SCCP 
25 Connection ID to SS7 stack. 

31 SS7 stack sends SCCP N-DATA (CONNECT 
ACK) Request to BSS. 

32 CC sends connection response to MUNI Inter- 
face. 

30 

IS.Handoff: Old BS IWF 

[0107] FIG.1 8 shows the ha.ndoff procedure at the old 
BS IWF, which is originally controlling the call. Refer- 
35 ence numerals adjacent to arrows denote the following 
steps 1-1 7 { respectively. 

1 BSS sends SCCP N-DATA (HANDOVER RE- 
QUIRED) indication to SS7 stack. 
to 2 RR receives HO Message (HANDOVER RE- 
QUIRED) with SCCP Connection ID. This message 
contains a list of cell ids where the call can be hand- 
ed off. 

3 RR Translates Cell id to IWF address by lookup 
45 in the database. RR selects a cell id from the list 

and translates It to the address of the corresponding 
IWF handling it. 

4 RR sends a handover request message to the 
handoff destination IWF, 

so 5 Handover response message is sent to RR. A fail- 
ure message or timeout at this stage would have 
resulted in RR selecting another ceil Id from the ceil 
id list and starting from step 2, 
8 RR sends GO Message (HANDOVER COM- 
55 MAND) with SCCP Connection ID. RR starts GSM 
Timer T103. 

7 SS7 stack sends SCCP N-DATA (HANDOVER 
COMMAND) Request. 
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8 RR receives Handover completion message after 
handover completion on the new IWF side. 

9 RR sends Handover indication message to MM, 

10 MM forwards Handover Indication to CC. 

11 Call Control Block is cleared in the DB by CC, 
12, 12a RR sends CLEAR COMMAND to SS7 
stack, which sends N-DATA (CLEAR COMMAND) 
Request. 

13 SS7 stack receives N-DATA (CLEAR COM- 
PLETE) Indication, 

14 RR receives CO Message (CLEAR COM- 
PLETE) with SCOP Connection ID. 

15 CC Clears Connection via the GSMP Client. 
18 CC Updates Resource Table. 

1 7 Release SCCP Connection with SCCP Connec- 
tion ID. 

17. Handoff: New BS IWF 

[0108] FIG. 17 shows the handoff procedure at the 
new BS IWF. Reference numerals adjacent to arrows 
denote the following steps 1-21 , respectively. 

1 Receive Data with Handover request to BBS from 
Old IWF received on TCP connection with the IWF, 

2 RR obtains a mobile tag for the transaction. 

3 RR Allocates E1 and ATM resources. 

4 RR sends CO Message (HANDOVER RE- 
QUEST) to SS7 stack. This message does not con- 
tain a SCCP Connection ID as no SCCP connection 
exists. SS7 stack wili establish a SCCP connection 
to send this message and return the Connection ID 
to RR. 

5 SS7 stack sends SCCP N-CONNECT (HANDO- 
VER REQUEST) Request, 

6 SS7 stack receives SCCP N-CONNECT 
(HANDOVER REQUEST ACKNOWLEDGE) Con- 
firm. 

7 RR receives CO Message (HANDOVER RE- 
QUEST ACKNOWLEDGE) with SCCP Connection 
ID from SS7 stack. 

B RR sends Prepare Handoff with MOBILE TAG to 
MM. 

9 MM forwards Prepare Handoff message to CC. 

1 0 Forward Handover message is sent to MATM by 
CC. 

11 Forward Handover Confirm message is received 
from MATM by CC. 

12, 12a CC sends Prepare Handover message to 
MM which forwards it to RR. 

1 3 RR sends a Handover response message to the 
handoff originating IWF on TCP connection. RR 
starts RIL3 RR Timer T2G4. 

14 CC Programs Connection via GSMP Client. 

15 SS7 stack receives SCCP N-DATA (HANDO- 
VER DETECT) Indication. 

18 RR receives CO Message (HANDOVER DE- 
TECT) with SCCP Connection ID from SS7 stack. 



17 SS7 stack receives SCCP N-DATA (HANDO- 
VER COMPLETE) Indication 

18 RR receives GO Message (HANDOVER COM- 
PLETE) with SCCP Connection ID from SS7 stack. 

5 RR stops Timer T204. 

19 Handoff Performed with MOBILE TAG at RR, 
which indicates it to CC via MM. 

20 CC invokes Handover complete message to 
MATM side, 

10 21 RR sends Handover complete to the Oid IWF. 

18. Call Release: Mobiie Initiated 

[Q10S] FIG. 18 shows a mobiie initiated call release 
15 procedure at the BS IWF. Reference numerals adjacent 
to arrows denote the following steps 1 -21 , respectively. 

1 SCCP N-DATA (DISCONNECT) indication re- 
ceived by SS7 stack. 
20 2,2aRR receives CO Message (DISCONNECT) to 
RRwsth SCCP connection Idandfon/vards it to MM, 

3 MM sends RIL3 CC Message (DISCONNECT) to 
CC with Mobile Tag. 

4 CC sends release connection request to MATM. 
25 5 MATM sends confirmation of connection release 

after call is released in MATM. 

6 CG sends RIL3 CC Message (RELEASE) to MM 
with Mobile Tag, CC starts GSM Timer T-308. 

7 MM sends RELEASE message to RR. 
so 8 RR sends CO Message (RELEASE) to SS7 stack 

with SCCP connection id. 

9 SS7 stack sends SCCP N-DATA (RELEASE) re- 
quest towards BSS. 

10 SS7 stack receives SCCP N-DATA (RELEASE 
35 COMPLETE) Indication from BSS. 

11, 11a RR receives CO Message (RELEASE 
COMPLETE) from SS7 stack with Mobile Tag, 
which forwards it to MM, 

1 2 MM forwards the message to CC, CC stops Tim- 
4Q erT-308 ; 

13 CC releases the GSM TID. 

14 RR sends CO Message (CLEAR COMMAND) 
with SCCP Connection ID to SS7 stack. 

1 5 SS7 stack sends N-DATA (CLEAR COMMAND) 
^5 Request to BSS, 

16 N-DATA (CLEAR COMPLETE) indication is re- 
ceived by SS7 stack from BSS. 

17 RR receives CO Message (CLEAR COM- 
PLETE) with SCCP Connection ID. 

50 18 CC clears Connection and frees resources. 

19 CC updates resource table. 

20 Release SCCP Connection with SCCP Connec- 
tion ID. 

21 Delete CCB. 

55 

19. Call Release: Network initiated 

[01 10] FIG.1 9 shows the network initiated call release 
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procedure at the BS IWF. Reference numerals adjacent 
to arrows denote the following steps 1 -1 8 } respectively. 

1 MAIM sends release connection indication to CC. 

2 CC sends release connection response to MATM, s 

3 CC sends RIL3 CC Message (DISCONNECT) to 
MM with Mobile Tag and starts Timer T-305, 
4, 4aMM forwards the message to RR, which for- 
wards it to SCCP with SCCP Connection id, 

5 SS7 stack sends SCCP N-DATA (DISCONECT) 10 
Request to BSS. 

6 SS7 stack receives SCCP N-DATA (RELEASE) 
Indication from SS7 SCCP. 
7, 7a RR receives CO Message (RELEASE) with 
SCCP Connection Id and forwards to MM. 15 

8 MM towards RIL3 CC Message (RELEASE) to 
CC with Mobile Tag. CC stops Timer T-305, 

9 CC sends Delete Connection to GSMP Client. 
10, 10a CC sends RIL3 CC Message (RELEASE 
COMPLETE) to MM, which forwards it to RR with 
Mobile Tag, ices; 

11 RR sends CO Message (RELEASE COM- 
PLETE) with SCCP Connection id to SS7 stack. 

12 SS7 stack sends SCCP N-DATA (RELEASE 
COMPLETE) Request to SS7 SCCP. 25 

13 RR sends CO Message (CLEAR COMMAND) 
with SCCP Connection id to SS7 stack, 

14 SS7 stack sends N-DATA (CLEAR COMMAND) 
Request to BSS. 

15 SS7 stack receives N-DATA (CLEAR COM- so 
PLETE) Indication from BSS. 
18 RR receives CO Message (CLEAR COM- 
PLETE) with SCCP Connection ID. 

17 CC Frees GSM resources and Updates Re- 
source Table. 35 

1 8 RR releases SCCP Connection with SCCP Con- 
nection ID by sending RR_SCCP_DISC to SS7 
stack. 

/. Address Server Architecture 4Q 
1 , Component Overview 

[0111] The main components of the Address Server 
are shown in FIG.20, The modules of the Address Serv- 45 
er are described briefly as follows, 



the Database Server The services provided by the 
AddServer include: 

• Translation of IMS! to HA and LocMServer Ad- 
dress. 

• Translation of MSISDN to HA. 

• Allocation of new HA based on Network prefix 
(NP). 

• Updatlon of LocMServer Address for a given 
IMS!, 

• Roaming mobile context creation and alloca- 
tion of an ESI. 

3. Roaming mobile context deletion. 

4. The AddServer returns causes of the failure of 
certain operations. 



3. TCP Adapter 
20 [01 13] The TCP Adapter provides the following serv- 



1. The TCP Adapter accepts connection requests 
from the 3S IWFs using TCP/IP sockets, and es- 
tablishes and maintains these connections. 

2. It can initiate termination of these connections as 
and when required. 

3. it forwards the requests originating from the IWFs 
to the Addserver. 

4. it forwards the response of the Addserver to the 
corresponding IWR 

[0114] it monitors two sockets: an INET domain sock- 
et and a UNIX domain socket. It communicates to 
Addserver over the UN IX domain socket, it accepts con- 
nect requests from IWF BSAs on the INET domain sock- 
et. All the IWF BSAs write their address mapping re- 
quests on the INET socket. A request reference number 
uniquely identifies each request. TheTCP adapterthen 
forwards these requests to the Addserver, Upon receiv- 
ing the response from the AddServer, the TCP adapter 
forwards it to the respective IWF. TheTCP Adapterfunc- 
tions as a concurrent server. It spawns a separate han- 
dier for each IWF connecting to it. 

4. Database Server 



2. AddServer 



[0112] 

tions: 



i he AddServer performs the following tunc- 50 



1 . The AddServer Implements the address transla- 
tion protocol used by the clients for accessing the 
services of the AddServer 

2. The AddServer accepts service requests from 
the client IWFs and provides the requested services 
by constructing appropriate service sequences for 
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[0115] The Database Server provides the following 
services: 

1 . It provides data retrieval services to the Address 
Server. Address translation and data conversion 
are performed using these services. In addition the 
Address Server accesses network Information. 

2. it provides data insertion services for creating 
temporary contexts for roaming mobiles, 

3. It provides data deletion services for deleting out- 
dated mobile contexts. 
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[0116] The database contains a SQL Database. The 
SQL Database system consists of a Database Server 
Daemon, The clients who wish to access the database 
connect to the Database Server over TCP/IP Socket 
and send in their requests in the form of SQL Language 
Queries. The Database Serverprocesses these queries 
and writes the result back on the socket. This client- 
server approach provides the remote access facility for 
the Database. 

[0117] Other modifications and variations to the in- 
vention will be apparent to those skilled in the art from 
the foregoing disclosure and teachings. Thus, while only 
certain embodiments of the invention have been specif- 
ically described herein, it will be apparent that numerous 
modifications may be made thereto without departing 
from the spirit and scope of the invention. 



Claims 

1 . A wireless network system characterized by: 

a mobility enhanced packet data network; 
at least one basestation subsystem (BSS), said 
BSS communicating with said mobility en- 
hanced packet data network, said BSS further 
comprising a base station controller (BSC); and 
said mobility enhanced packet data network 
having at least one bridge (GW) to an external 
network. 

2. The network of claim 1 wherein said mobility en- 
hanced packet data network Is connected to said at 
least one BSS through the BSC using an interwork- 
ing function (IWF), said !WF being implemented in 
a computer. 

3. The network of claim 1 or 2 further comprising a Ad- 
dress server (AS) attached to said mobility en- 
hanced packet data network. 

4. The network of one of claims 1 to 3 wherein said 
network can transport data and voice traffic origi- 
nated or terminated by mobile devices. 

5. The network of one of claims 1 to 4 wherein said 
bridge is formed using a gateway, said gateway per- 
forming protocol mapping between protocols in the 
mobility enhanced network and external network. 

6. The network of one of claims 2 to 5 wherein said 
IWF is integrated into said BSC. 

7. The network of one of claims 2 to 8 wherein said 
IWF includes functional entities comprising: 

BSS control; 
call control; 



mobility management; 
radio resource management; 
user plane adaptation; and 
proxy signaling. 

5 

8. The network of one of claims 3 to 7, wherein said 
address server is queried and said address server 
contains mobile ID, routing information for routing 
within the mobile packet data network, subscriber 

10 profile and authentication information. 

9, The network of one of claims 2 to 8 wherein call 
processing is done in a distributed fashion by the 
IWF. 

15 

1Q. The network of one of claims 2 to 9 wherein said 
IWF performs proxy signaling for the packet data 
network. 

1 1 . The network of one of claims 3 to 1 0 wherein MSIS- 
DN number is used to select a proxy signaling in- 
stance. 

12. The network of one of claims 3 to 11 wherein said 
network is based on ATM. 

13. The network of one of claims 3 to 12 wherein air 
interface is based on a GSM. 

14. The network of one of claims 5 to 13 wherein said 
gateway is co-located within the IWF. 

15. The network of one of claims 5 to 14 wherein said 
gateway is attached to any point in the mobility en- 
hanced packet data network. 

18. The network of one of claims 11 to 15 wherein the 
Address server comprises International mobile sub- 
scriber identifier (IMSI). 

17, The network of one of claims 11 to 15 wherein the 
Address server comprises mobile station ISDN 
number 

18, The network of one of claims 11 to 15 wherein the 
Address server comprises packet data network 
routing Information, 

19, The network of one of claims 13 to 18 wherein 
MSISDN is carried in the Call Setup message as 
subaddress IE. 

20, The network of one of claims 13 to 19 where ATM 
adaptation layer 1 is used in the network for voice 
traffic bearer, 

21 , The network of one of claims 13 to 20 where ATM 
adaptation layer 2 Is used In the network for voice 
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traffic bearer. 

22. A network system with traffic originating in and ter- 
minating in mobile devices, wherein a single net- 
work infrastructure can handle both data and voice s 
traffic. 

23. The network system of claim 22 wherein different 
interface technologies are used, 

1Q 

24. A method for updating a location of a mobile station 
(MS) in a cellular networking system, said cellular 
networking system comprising at least one base 
station subsystem (BSS) connected to a mobility 
enhanced data network through an IWF and an ad- 13 
dress server said method characterized by: 

a) invoking a location update procedure of the 
address server to obtain information stored for 
the MS; 

b) triggering authentication of the MS using said 
information; 

c) marking the MS as active if said authentica- 
tion is successful; and 

d) registering an address of the IWF as a rout- 
ing address within the mobility enhanced pack- 
et data network. 

25. A method for terminating a call in a mobile station 
(MS) in a cellular networking system, said cellular 
networking system comprising at least one base 
station subsystem (BSS) connected to a mobility 
enhanced data network through an IWF and an ad- 
dress server, said method characterised by: 

a) conveying the routing information of the MS 
as part of a call setup message; 

b) using the routing information to identify and 
select the proxy signaling instance associated 
with the MS; 

c) invoking necessary actions including service 
authorization, paging, call setup and bearer 
connection establishment, said invoking being 
done by the IWF; and 

d) returning confirmation to a caller if the call is 
accepted otherwise sending an error message; 

28. A method for originating a call in a mobile station 
(MS) in a cellular networking system, said cellular 
networking system comprising at least one base so 
station subsystem (BSS) connected to a mobility 
enhanced data network through an IWF and an ad- 
dress server, said method characterized by: 



work or destined to an outside user; 

c) directing the call to a gateway function if the 
call setup request is destined for an outside 
party: and 

d) establishing one or multiple connections for 
the caii. 

27. A method for performing a handover of signaling 
and bearer connections of a mobile station (MS) be- 
tween two IWFs in a cellular networking system, 
said cellular networking system comprising at least 
two base station subsystems (BSS) connected to a 
mobility enhanced data network through the two 
IWFs and an address server, said method charac- 
terised by: 



a) a BSS requesting a handover; 

b) the IWF associated with the BSS determin- 
ing the target IWF based on radio ceil identifies 

20 supplied in the handover request; 

c) triggering necessary procedures on the net- 
work side and the BSS side to facilitate hando- 
ver of signaling and bearer connections; 

d) communicating with the target IWF; 
25 e) providing connection and MS data to the tar- 
get IWF so that the connection can be re-rout- 
ed; and 

f) updating the address server with the address 
of the target IWR 

so 
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a) receiving a connection setup request carry- ss 
Ing destination information at the IWF; 

b) deciding whether the call setup request is 
destined for the mobility enhanced data net- 
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